Whilst it has been a shorter week, it feels like it has been busier than usual, but we have had some exciting news with the merger of Software Central and Robopack! Only a couple of weeks until MEM summit in Paris too, hopefully I’ll see some of you there.
Community Content
Secure boot certificate expiry is looming so if you haven’t done so already, now is the time to be doing something about it. Working out which to repair is a great start and this Log Analytics dashboard from Damien Van Robaeys is well worth implementing
https://www.systanddeploy.com/2026/04/windows-secure-boot-certificate.html
Also looking at secure boot, Thomas Marcussen looks at what it means to you and some scripts to fix it
BlackLotus and the 2026 Secure Boot Certificate Expiry: What It Means and How to Fix It
For those looking to get started with AI agents, this guide from Niels Kok looks at creating your own with Microsoft Foundry
Break glass accounts are critical to any environment, but must be setup and protected correctly. This guide from Sebastian F. Markdanner runs through why you need one and how to configure it properly
If you want to manage browser access to location for your managed devices, check out this post from Peter van der Woude
Intune kiosks are more powerful, but more complex with the introduction of assigned access. Here, Kevin Malinoski speaks to Nicholas Pilzner from Microsoft about it
Exclusive Interview with Microsoft Intune Engineer: Deep Dive into Assigned Access & Kiosk Mastery
This post from Niklas Tinner looks at multi-admin approval, why you need it, some things to watch and how it works within the Intune portal
https://www.oceanleaf.ch/the-easy-intune-multi-admin-approval-guide/
Mads Johansen also looks at multi-admin approval here
https://evil365.com/intune/MultiAdmin-Approval/
This second part of a series from Andy Jones continues looking at UTCM to monitor your tenant for drift and how it works in reality
We have an excellent script (and in-depth post) here from Joe Loveless to report on your configured Settings Catalog policies
https://joeloveless.com/blog/building-an-intune-settings-catalog-report
If your Lenovo devices are dimming and locking even when in use, Florian Salzmann has a remediation here to fix it
https://scloud.work/fix-lenovo-intelligent-sensing-service-locking-screens-with-intune/
A very unused feature in MDE, Live Response gives you real-time PowerShell access to your devices. This post from Rahul Jindal covers how to use it
https://rahuljindalmyit.blogspot.com/2026/04/microsoft-defender-live-response-last.html
Looking for ways to improve your secure score for devices? Check out this guide from Justin Verstijnen
Video Content
Now for this weeks video content, starting with a guide on how to configure Storage Sense on your devices (particularly shared ones) using Intune from Mark Oldham
This video from Chander Mani Pandey shows how to use a requirements rule to either allow of block applications during ESP
Learn all about how to configure and fix the all-important ESP in this video from Steve Weiner
Learn how to do compliance properly in this video from Jonathan Edwards
Microsoft Content
We start this weeks Microsoft content with the all important Windows News you can use from Chris Morrissey
Hotpatch will soon be turned on by default in your tenant to improve your Windows security. Learn more here from Katharine Holdsworth
Not enough people configure Intune with Log Analytics to keep historical reports with all of the lovely exec-ready graphs. If you aren’t currently doing so, check out this guide from Janusz Gal
On the subject of reporting, Windows 365 has a whole new reporting platform as covered here by Doug Coombs
Not strictly for this week, but some exciting things on the Intune in development page, make sure you bookmark this one
https://learn.microsoft.com/en-gb/intune/intune-service/fundamentals/in-development
Hardening your admin actions on Windows devices is something everyone should be doing. Learn more here from Dashmeet Ajmani
That’s all for this week, have a great weekend!